There are some things that cyber insurance simply won’t cover for your business.
Many places and websites will talk about the great benefits of cyber insurance, including almost any cyber insurance policy sample or cyber insurance policy pdf you can find. But if you’re considering cyber insurance, you need to know each aspect of the insurance—including the not-so-great stuff.
The truth about cyber liability insurance is that there are some things that cyber insurance simply won’t cover for your business. What does cyber insurance not cover?
First, cyber insurance typically won’t cover future profit loss after a cyber attack. If a cyber attack causes you to lose customers and consequently lose profit, cyber insurance will not reimburse you for that profit loss.
Also, most cyber liability insurance policies don’t cover your business for a decrease in company value. For example, your intellectual information could be stolen through digital crime. Without that information, your company becomes less valuable overall, but insurance providers will not cover that loss of value.
Finally, cyber insurance won’t pay for a security system upgrade. Even if you want to enhance your security system after a cyber attack to prevent future attacks, your insurance will not cover the cost of those upgrades.
Now, remember, different policies have different coverage limits, so you could probably find other aspects of digital crime that a specific insurance policy won’t cover. But the aspects mentioned here are general things that insurance policies seldom cover.
What Is Cyber Insurance?
Now that the question of what does cyber insurance not cover is answered, the unpleasant information about cyber liability insurance is out of the way, and you can explore more positive aspects of cyber insurance.
Of course, some of the most important and helpful questions to answer include what is cyber insurance and why do you need it, so let’s dive into those questions first.
What is cyber insurance? As any cyber insurance pdf would probably tell you, cyber insurance is a type of insurance meant to provide organizations with financial security against the adverse effects that a cyber attack may cause. It can cover direct financial loss from a security breach and the services necessary to recover after a cyber attack.
But cyber insurance comes in many different forms. You can get cyber insurance for individuals, which typically focuses on protection against identity theft. Or you can get cyber insurance for small businesses, which either includes first-party coverage, third-party coverage, or both. There is also cyber insurance for enterprises, and it will include some combination of first-party and third-party coverage as well.
To get this insurance, there may be several cyber insurance requirements your business has to meet. As Ryan Dunn, the Director of Insurance here at Trava, explained, it is getting harder and harder to qualify for cyber insurance as the requirements become more strict and the cyber insurance market hardens.
Yet, cyber insurance is still a worthy investment because it can cover most of the costs associated with a cybersecurity breach. These costs are significant, including anything from notification systems for affected customers to forensic services for data recovery. So, having these costs covered is a major cyber insurance benefit.
What Does Cyber Insurance Cover?
Speaking of covering the costs of cyber attacks, what does cyber insurance cover anyway?
Does cyber insurance cover ransomware? What about general cyber extortion? Or does it cover the loss of funds from a phishing attack? The answer to all those questions is yes. There are cyber insurance policies for ransomware, general cyber extortion, and phishing attacks.
But more generally speaking, cyber insurance can cover a wide variety of losses and costs associated with digital crime including data recovery, forensic specialists, and loss of income from business interruptions. Policies also might cover court costs and other legal fees, like claims and settlements for liability. Finally, cyber insurance can cover customer reparations, including public relations services, customer notification systems, and even credit monitoring for the affected customers.
But unlike the question of what does cyber insurance not cover, which mentions things not included in a policy, the question of what does cyber insurance cover has greatly varied answers based on the policy and the insurance provider. For example, a policy that Chubb Cyber Insurance offers is vastly different from a policy that a different company offers. Also, a policy of cyber insurance for businesses will cover many different risks that cyber insurance for individuals won’t include.
With all these different coverage options, it may be helpful for you to have a cyber insurance coverage checklist. This checklist can guide you through specific coverage options to look for in an insurance policy.
Here is a good cyber insurance coverage checklist to start with:
- Cyber extortion coverage (including ransomware)
- Social engineering coverage (including phishing campaigns)
- Lost of income coverage for business interruptions
- Dependent business interruption coverage
- Virus transmission coverage
- Liability coverage
- Data breach coverage (all types, not just digital)
As you look at your business's specific vulnerabilities, you may find some coverage options that you want to add to this checklist. But you can use this checklist as a springboard for your own customized checklist of insurance coverage requirements.